That's true. You could still do IAM role authentication via web identity which would be much safer than a user and could still be automated.